StackRadar

CVE-2024-38428

Critical

Advisory

Published 16 Jun 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
415
of 17,787 indexed, latest versions
Container images
398
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: wget security update

Carried by container images the latest versions of 415 of 17,787 indexed charts deploy, on 398 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+12 more1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm1, 1.19.4-1ubuntu2.2+esm1, 1.20.3-1ubuntu2.1+4 more370
wgetrpm1.19.5-8.el8_1.1, 1.19.5-10.el8, 1.19.5-11.el8, 1.21.1-7.el90:1.19.5-10.el8_6.2, 0:1.19.5-12.el8_10, 0:1.21.1-8.el9_428
OSV records
DEBIAN-CVE-2024-38428UBUNTU-CVE-2024-38428RHSA-2024:4998RHSA-2024:5299RHSA-2024:6192RLSA-2024:5299DLA-4133-1
Also known as
RHSA-2024:6208, USN-6852-1, USN-6852-2, USN-8543-1

Charts affected

415 by stars
ChartLatestAffected imagesRadar Score
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
wget@1.21.4-1ubuntu4
1.21.4-1ubuntu4.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1

Open the chart page →

9,347
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

3,392
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

11,119
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

9,397
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1

Open the chart page →

28,605
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1

Open the chart page →

9,248
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

13,677
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

1,838
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,207

Container images carrying it

398 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
wget@1.19.5-10.el8
0:1.19.5-12.el8_10
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
wget@1.19.5-10.el8
0:1.19.5-12.el8_10
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
wget@1.19.5-11.el8
0:1.19.5-12.el8_10
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
wget@1.19.5-10.el8
0:1.19.5-12.el8_10
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
wget@1.19.5-10.el8
0:1.19.5-12.el8_10
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
wget@1.19.5-11.el8
0:1.19.5-12.el8_10
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
wget@1.19.5-10.el8
0:1.19.5-12.el8_10
1
countly/api:25.05.4f4cc7447c4f5
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
countly/frontend:25.05.42acbc11499b6
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
danuk/k8s-sftp-gcs:latestdd0e6585c44f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
danuk/telegram-sender:0.0.1026560388070
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
darkobas/ethexporter:latest62e6464491ba
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
darkobas/tokenexporter:latesta0349a0eedf0
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
daskdev/dask-notebook:1.1.0052630f5ca04
wget@1.19.4-1ubuntu2.1
1.19.4-1ubuntu2.2+esm1
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm1
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
douz/helpdesk:latest4384103d0219
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
dragonflyoss/client:v0.1.82edf3e921f4e0
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
dremio/dremio-oss:24.1.080ed2e3b7c43
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
drpcorg/dshackle:0.54.08858fae1859d
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
easysoft/quickon-zentao:18.5592ad5df1f8b
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
engrmth/bnkr:2.1.06d8464e6f0e8
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
fanzynoodle/smeejas:0.0.15f9916c1a287
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
farberg/apache-knox-docker:1.6.14b4a22487394
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
felipecs8/app-db-connection-test:v129e06c9c6385
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
firefart/requesttracker:5.0.40d6249906d8c
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
flyway/flyway:9.1545b5d7cdc75a
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
galaxy/galaxy-init:v18.010267bad550e6
wget@1.15-1ubuntu1.14.04.4
1.15-1ubuntu1.14.04.5+esm2
1
galaxy/galaxy-stable:v18.018e577a626dfd
wget@1.15-1ubuntu1.14.04.4
1.15-1ubuntu1.14.04.5+esm2
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
golenski/db-init:1.0.086ca17cd3063
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
guacamole/guacamole:1.5.50f62f6d17ab3
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
ha33ona/python:test6affdfc644d0
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
haugene/transmission-openvpn:4.0059216cfae4b
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1
1
haveagitgat/tdarr:2.00.181256348872ce
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
hmediade/printserver:latest481a552c8e1c
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
hyperledger/fabric-peer:1.3.06756c7c48234
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.